ropshell> use 4547677fe0407ffc12937106101df1aa (download)
name         : 7 (i386/ELF)
base address : 0x8049030
total gadgets: 4976

ropshell> suggest "stack pivoting"
> 0x0804a748 : xchg eax, esp; ret
> 0x08088f65 : lea esp, [eax - 0x76000037]; ret
> 0x08049c2a : lea esp, [ecx - 4]; ret
> 0x080a6378 : mov esp, ecx; jmp edx
> 0x08085da9 : lea esp, [edi - 8]; pop edi; ret
> 0x0804b28a : lea esp, [ebp - 0xc]; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x08050363 : xchg esp, ecx; daa ; std ; call [eax - 0x73]
> 0x080723de : xchg esp, ebp; pop ebx; std ; call [eax - 0x73]
> 0x08077349 : xchg edi, esp; add [eax], al; add [ebx + 0x6140b3ac], cl; std ; inc [ecx]; fnstsw [esi]; jmp ebp
> 0x08049a55 : leave ; ret